Thursday, November 13, 2008

Spam is yesterday?

A web hosting company allegedly responsible for at least 75% of the daily spam volume worldwide has been forced offline, thanks to evidence gathered by security experts. Experts say the company hosts a vast community of cyber criminals including spammers, phishers, malware distributors and even peddlers of child porn. But will the move really take a bite out of cybercrime? Probably not. The criminals will in all likelihood move their operations elsewhere, most likely to an overseas host. As long as there are webhosting firms willing to look the other way, these shutdowns will only be temporary obstacles rather than permanent solutions.
Source: http://www.allspammedup.com/2008/11/source-of-75-of-sent-spam-forced-offline
If you watch the picture closer, you can see that there was no spam activity until local business hours, it shows the localization of the subject. We'll see the results tomorow.
And check out the yearly trend, of course there was some protection improvements, but the result is clear even to the horse. (Green=spam, blue (yes that invisible line at the bottom)=nospam).

Friday, October 31, 2008

AviOracle or Oraviation?




Wednesday, October 29, 2008

Gliding season 2008

The whole season of 2008 can be rendered into this movie of my friends. nJoy!

noSPAM hits SPAM counter

more evidence on financial problems in spam market.


Friday, October 17, 2008

noSPAM hits SPAM counter

Im really happy to announce, that today for the first time in three years my spam counter reversed upside down, its possibly related to "World’s largest spammer nabbed". Of course the dynamic firewall filter i added a few months ago began to give results too. Anyways, server has nothin to do anymore ;)

Tuesday, October 14, 2008

Lithuania votes 2008


To vote or not to vote?
Voting sucks, the whole political circus sucks. Im myself absolutely politically apathetic and happily introduce you to "Lithuania votes parliament 2008".

Wednesday, October 8, 2008

spamchk

The original spamchk filter used by postfix is described on http://www.akadia.com/services/postfix_spamassassin.html. Remebered to post some advanced settings i made, you find it usefull if you want to split email to spam, nospam and inbetween (lightspam).

#!/bin/sh
# -----------------------------------------------------------------
# File:        spamchk
# Purpose:     SPAMASSASIN shell-based filter
# Location:    /usr/local/bin
# Usage:       Call this script from master.cf (Postfix)
# Certified:   GENTOO Linux, Spamassassin 3.0, Postfix
# -----------------------------------------------------------------

# Variables
#SENDMAIL="/usr/local/postfix/sendmail/sendmail -i"
SENDMAIL="/usr/sbin/sendmail -i"
EGREP=/bin/egrep

# Exit codes from
EX_UNAVAILABLE=69

# Number of *'s in X-Spam-level header needed to sideline message:
# (Eg. Score of 5.5 = "*****" )
SPAMLIMIT=4.5
SPAMLIMITKILL=6.1

# Clean up when done or when aborting.
trap "rm -f /var/tempfs/out.$$" 0 1 2 3 15

# Pipe message to spamc
cat | /usr/bin/spamc -s 1024000 -u filter > /var/tempfs/out.$$

#----- advanced AWK filter by simakas --------------------------------
# 050915 AWK part and splitting method to light_spam & spam

STATUS=`more /var/tempfs/out.$$ | grep -m 1 X-Spam-Status | awk '{print $3}' | awk -F= '{print $2}'`
warn=$(LC_ALL=C  awk 'BEGIN{if('$STATUS'>='$SPAMLIMIT')print "SPAM";else print "NOSPAM"}')
kill=$(LC_ALL=C  awk 'BEGIN{if('$STATUS'>='$SPAMLIMITKILL')print "SPAM";else print "NOSPAM"}')

# Are there more than $SPAMLIMIT stars in X-Spam-Level header? :
#if $EGREP -q "^X-Spam-Level: \*{$SPAMLIMIT,}" < /var/tempfs/out.$$
if [ "$warn" = "SPAM" ]
then
  # Option 1: Move high scoring messages to sideline dir so
  # a human can look at them later:
  # mv out.$$ $SIDELINE_DIR/`date +%Y-%m-%d_%R`-$$
  # Option 2: Divert to an alternate e-mail address:
  # 050915 Drop mail if SPAMLIMITKILL is reached or deliver it to human recheck
  #  if $EGREP -q "^X-Spam-Level: \*{$SPAMLIMITKILL,}" < /var/tempfs/out.$$
     if [ "$kill" = "SPAM" ]
     then
       #Drop it like its hot
       #cp /var/tempfs/out.$$ /tmp/`date +%Y-%m-%d_%R`-$$
       rm -f /var/tempfs/out.$$
     else
       #Or deliver to trashbox for human action
       $SENDMAIL trash@svelita.lt  < /var/tempfs/out.$$
     fi
  # Option 3: Delete the message
  #rm -f /var/tempfs/out.$$
else
  $SENDMAIL "$@" < /var/tempfs/out.$$
fi
# Postfix returns the exit status of the Postfix sendmail command.
exit $?